A judge said security work beneath the White House can continue but ruled most visible construction on Trump’s ballroom must stop.